Abstract
As quantum computing technology matures, it poses a threat to the security of mainstream asymmetric cryptographic methods. In response, the National Institute of Standards and Technology released the final version of post-quantum cryptographic (PQC) algorithm standards in August 2024. These post-quantum cryptographic algorithms are primarily based on lattice-based and hash-based cryptography. Therefore, this study proposes the Post-Quantum Cryptography Winternitz-Chen (PQCWC) anonymous scheme, aimed at exploring the design of anonymous schemes based on PQC for future applications in privacy protection. The anonymous scheme designed in this study is mainly built on the Winternitz signature scheme, which can prevent the original public key from being exposed in the certificate. Furthermore, the PQCWC anonymous scheme integrates the butterfly key expansion mechanism, introducing the world’s first hash-based butterfly key expansion mechanism, achieving anonymity for both the registration authority and the certificate authority, thereby fully protecting privacy. In the experimental environment, this study compares various hash algorithms, including Secure Hash Algorithm-1 (SHA-1), the SHA-2 series, the SHA-3 series, and the BLAKE series. The results demonstrate that the proposed anonymous scheme can achieve anonymity without increasing key length, signature length, key generation time, signature generation time, or signature verification time.
References
R. Ibarrondo, G. Gatti and M. Sanz, “Quantum Genetic Algorithm With Individuals in Multiple Registers,” in IEEE Transactions on Evolutionary Computation, vol. 28, no. 3, pp. 788–797, 2024, doi:10.1109/TEVC.2023.3296780.
P. W. Shor, “Polynomial-time algorithms for prime factorization and discrete logarithms on a quantum computer,” in SIAM Journal on Computing, vol. 26, no. 5, pp. 1484–1509, 1997. DOI:10.1137/S0097539795293172.
K. Oonishi and N. Kunihiro, “Shor’s Algorithm Using Efficient Approximate Quantum Fourier Transform,” in IEEE Transactions on Quantum Engineering, vol. 4, pp. 1–16, 2023, Art no. 3102016, doi:10.1109/TQE.2023.3319044.
Y. Aono et al., “The Present and Future of Discrete Logarithm Problems on Noisy Quantum Computers,” in IEEE Transactions on Quantum Engineering, vol. 3, pp. 1–21, 2022, Art no. 3102021, doi:10.1109/TQE.2022.3183385.
Y. Wang, H. Zhang and H. Wang, “Quantum polynomial-time fixed-point attack for RSA,” in China Communications, vol. 15, no. 2, pp. 25–32, 2018, doi:10.1109/CC.2018.8300269.
S. P. Jordan and Y.-K. Liu, “Quantum Cryptanalysis: Shor, Grover, and Beyond,” in IEEE Security & Privacy, vol. 16, no. 5, pp. 14–21, 2018, doi:10.1109/MSP.2018.3761719.
G. Alagic et al., “Status Report on the Third Round of the NIST Post-quantum Cryptography Standardization Process,” NIST Special Publication, NISTIR 8413, 2022. DOI:10.6028/NIST.IR.8413.
T. Tosun and E. Savas, “Zero-Value Filtering for Accelerating Non-Profiled Side-Channel Attack on Incomplete NTT-Based Implementations of Lattice-Based Cryptography,” in IEEE Transactions on Information Forensics and Security, vol. 19, pp. 3353–3365, 2024, doi:10.1109/TIFS.2024.3359890.
S. Suhail, R. Hussain, A. Khan and C. S. Hong, “On the Role of Hash-Based Signatures in Quantum-Safe Internet of Things: Current Solutions and Future Directions,” in IEEE Internet of Things Journal, vol. 8, no. 1, pp. 1–17, 2021, doi:10.1109/JIOT.2020.3013019.
Cohen, R. G. L. D’Oliveira, S. Salamatian and M. Médard, “Network Coding-Based Post-Quantum Cryptography,” in IEEE Journal on Selected Areas in Information Theory, vol. 2, no. 1, pp. 49–64, 2021, doi:10.1109/JSAIT.2021.3054598.
J. Dey and R. Dutta, “Progress in Multivariate Cryptography: Systematic Review, Challenges, and Research Directions,” in ACM Computing Surveys, vol. 55, no. 12, Article No.: 246, 2023, doi:10.1145/3571071.
National Institute of Standards and Technology, “Stateless Hash-Based Digital Signature Standard,” Federal Information Processing Standards Publication, FIPS 205, 2024. DOI:10.6028/NIST.FIPS.205.
National Institute of Standards and Technology, “Module-Lattice-Based Digital Signature Standard,” Federal Information Processing Standards Publication, FIPS 204, 2024. DOI:10.6028/NIST.FIPS.204.
National Institute of Standards and Technology, “Module-Lattice-Based Key-Encapsulation Mechanism Standard,” Federal Information Processing Standards Publication, FIPS 203, 2024. DOI:10.6028/NIST.FIPS.203.
K.-A. Shim, “A Survey on Post-Quantum Public-Key Signature Schemes for Secure Vehicular Communications,” in IEEE Transactions on Intelligent Transportation Systems, vol. 23, no. 9, pp. 14025–14042, 2022, doi:10.1109/TITS.2021.3131668.
H. Gharavi, J. Granjal and E. Monteiro, “Post-Quantum Blockchain Security for the Internet of Things: Survey and Research Directions,” in IEEE Communications Surveys & Tutorials, vol. 26, no. 3, pp. 1748–1774, 2024, doi:10.1109/COMST.2024.3355222.
Z. Yang, H. Alfauri, B. Farkiani, R. Jain, R. D. Pietro and A. Erbad, “A Survey and Comparison of Post-Quantum and Quantum Blockchains,” in IEEE Communications Surveys & Tutorials, vol. 26, no. 2, pp. 967–1002, 2024, doi:10.1109/COMST.2023.3325761.
C. H. Chen, “Post-Quantum Cryptography X.509 Certificate,” 2024 International Conference on Smart Systems for applications in Electrical Sciences (ICSSES), Tumakuru, India, 2024, pp. 1–6, doi:10.1109/ICSSES62373.2024.10561274.
C. H. Chen, “Comments on “Exploring Secure V2X Communication Networks for Human-Centric Security and Privacy in Smart Cities” – Privacy-Preserving Certificate in V2X Communications,” in IEEE Access, vol. 13, pp. 76923–76933, 2025, doi:10.1109/ACCESS.2025.3563461.
“IEEE Draft Standard for Wireless Access in Vehicular Environments (WAVE) – Certificate Management Interfaces for End Entities,” in IEEE P1609.2.1/D2, September 2025, pp. 1–259, 9 Oct. 2025. URL: https://ieeexplore.ieee.org/servlet/opac?punumber=11201012.
Hammi, J. P. Monteuuis, H. Labiod, R. Khatoun and A. Serhrouchni, “Using Butterfly Keys: A Performance Study of Pseudonym Certificates Requests in C-ITS,” 2017 1st Cyber Security in Networking Conference (CSNet), Rio de Janeiro, Brazil, 2017, pp. 1–6, doi:10.1109/CSNET.2017.8242002.
M. Honda and Y. Kaji, “Optimum Fingerprinting Function for Winternitz One-Time Signature,” 2024 IEEE International Symposium on Information Theory (ISIT), Athens, Greece, 2024, pp. 2898–2902, doi:10.1109/ISIT57864.2024.10619351.
M. Honda and Y. Kaji, “Extended Version—to Be, or Not to Be Stateful: Post-Quantum Secure Boot Using Hash-based Signatures,” Journal of Cryptographic Engineering, vol. 14, pp. 631–648, 2024, doi:10.1007/s13389-024-00362-4.
S. Khan et al., “A Survey on X.509 Public-Key Infrastructure, Certificate Revocation, and Their Modern Implementation on Blockchain and Ledger Technologies,” in IEEE Communications Surveys & Tutorials, vol. 25, no. 4, pp. 2529–2568, 2023, doi:10.1109/COMST.2023.3323640.
P. Kurariya, A. Bhargava, S. Sailada, N. Subramanian, J. Bodhankar and A. Kumar, “Experimentation on Usage of PQC Algorithms for eSign,” 2022 IEEE International Conference on Public Key Infrastructure and its Applications (PKIA), Bangalore, India, 2022, pp. 1–6, doi:10.1109/PKIA56009.2022.9952354.
C. H. Chen, G. Liu, Y. C. Wei, Z. Li and B. Y. Lin, “A Pre-signed Response Method Based on Online Certificate Status Protocol Request Prediction,” in Enterprise Information Systems, vol. 16, no. 8–9, 2022, doi:10.1080/17517575.2021.1986861.